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Abstract 

Since its discovery, differential linear logic (DLL) inspired numerous 
domains. In denotational semantics, categorical models of DLL are now 
commune, and the simplest one is Rel, the category of sets and relations. 
In proof theory this naturally gave birth to differential proof nets that are 
full and complete for DLL. In turn, these tools can naturally be translated 
to their intuitionistic counterpart. By taking the co-Kleisly category asso- 
ciated to the ! comonad, Rel becomes MRel, a model of the A-calculus that 
contains a notion of differentiation. Proof nets can be used naturally to 
extend the A-calculus into the lambda calculus with resources, a calculus 
that contains notions of linearity and differentiations. Of course MRel is 
a model of the A-calculus with resources, and it has been proved adequate, 
but is it fully abstract? 

That was a strong conjecture of Bucciarelli, Carraro, Ehrhard and 
Manzonetto in [4]. However, in this paper we exhibit a counter-example. 
Moreover, to give more intuition on the essence of the counter-example 
and to look for more generality, we will use an extension of the resource 
A-calculus also introduced by Bucciarelli et al in 4 for which A^oo is fully 
abstract, the tests. 



1 Introduction 

The first extension of the A-calculus with resources, by Boudol in 1993 [T], was 
introducing a special resource sensitive application that may involve multisets 
of aSine arguments (each one has to be used at most one time). This was a 
natural way to export resource sensitiveness to the functional setting. However, 
gathering no known and interesting properties (confluence, linearity...), it was 
not fully explored. 

Later on, Ehrhard and Regnier, working on functional interpretation of dif- 
ferential proof nets, discovered a calculus similar to Boudol's one, named dif- 
ferential A-calculus [TU]. By adding to the A-calculus a derivative operation 
^^(iV), which syntactically corresponds to a linear substitution of x by TV in 
M, it recovers the resource-sensitiveness. This is done through the translation 
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(Xx.M) [Ni,...,Nn;N-] - {Xx.^^{Ni,...,Nn)) N where Ni are the hnear ar- 
guments and N is the non Hnear one. This more semantical view even allow 
for the generalisation of the operation and recover excellent semantical prop- 
erties (confluence, Taylor expansion...). We will adopt the syntax of [13] that 
re-implements improvements from differential A-calculus into Boudol's calculus, 
and we will call it (9A-calculus. 

The category Rel of set and relations is known to model the linear logic, 
and, despite its high degree of degeneration {Rel°^ = Rel), it is a very natural 
construction. Indeed, what appeared to be a degeneration is in reality a natural 
choice that preserves all proofs, i.e. the interpretation function from proof to 
MRel is injective up to isomorphism (fSI). But our principal interest for this 
category is that it models the differential linear logic, and of known such category 
it is the simplest and more natural. 

As for every categorical model of linear logic, the interpretation of the ! in- 
duced a comonad. From that comonad we can construct the co-kleisly category. 
In the case of Rel, this new category, MRel, corresponds to the category of sets 
with, as morphisms from A to B, the relations from M.f{A) (the finite multisets 
over A) to B. It is then a model of the A-calculus and of the 9A-calculus. This 
construction being the most natural we can do, MRel is, a priori, one of the 
most natural models of the i9A-calculus (even if non well pointed [6]). 

It is only natural, then, to question on the depth of the link among the 
reflexive elements of MRel and the 9A-calculus. And more precisely among 
MRel's canonical reflexive element M.oa and the 9A-calculus. Until now we knew 
that J^ao ([6]) was adequate for the A-calculus, i.e. that two terms carrying the 
same interpretations in MRel behave the same way in all contexts. But we did 
not know anything about the counterpart, named full abstraction. 

This question has been thoroughly studied, however, since M.00 has been 
proved (resp. in [T^], [S] and [3]) fully abstract not only for both of the principal 
sub-calculi of i9A-calculus, namely the usual A-calculus and Kfoury's linear cal- 
culus of [n] , but also for the extension with tests of [4] (denoted ri9 A-calculus) . 
Therefore Bucciarelli et al emit in [J a strong conjecture of full abstraction for 
the (9 A-calculus. 

However, and it is our purpose here, a counter example can be found. In 
order to exhibit this counter example, we will take an unusual shortcut using 
full abstraction result for r9A-calculus. Indeed, we will prove a slightly more 
general theorem: the failure of full abstraction for 9A-calculus of any model that 
is fully abstract for r9A-calculus. Due to this generalization we will not have to 
introduce the full description of A4oo in the core of the article (it is available in 
annexes) . 

Additionally to be considerably easier and more intuitive than the direct and 
usual method, this way of proceeding is part of a larger study of full abstraction. 
Indeed, we are looking for a mechanical way to tackle full abstraction problems 
in two steps. First we extend the calculus with well chosen semantical objects 
in order to reach the definability of compact elements. Then we study the full 
abstraction question indirectly via the link between the operational equivalence 
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of the original calculus and of its artificial extension. This reduces our mix of 
semantic and syntactic question to a purely syntactic one, allowing us to use 
powerful syntactic constructions. 

Tests where introduced in [5] to have a full abstraction theorem for Boudol 
A-calculus with resources. Later on, the principle was improved in imple- 
menting semantic objects in the syntax in order to get full abstraction of Mao, 
following an idea of [9]. This extension can, in our context, be compared to a 
basic exception mechanism. The term f{Q) is raising the exception (or test) 
Q, absorbing all its non resources-limited applications and the exception t(M) 
is catching any exception in M by annihilating all the head-A-abstraction. The 
most important here being the scope of the t(AI) that act as an infinite appli- 
cation over M. 

Notations: Ax" will be used for Xxi, ...,x„ (n is not specified when it can be 
any integer) and / will denotes the identity Xx.x. 

2 Background 
2.1 QVcalculus 

As explained, this article is directly following [4]. For this reason we need to 
introduce the oA-calculus and then the tests. In the otVcalculus , the notion of 
linearity is capital. Any term in linear position will never suffer any duplication 
or erasing regardless the reduction strategy. Linear subterms are subterms that 
are either the first subterm of a lambda abstraction in linear position, the left 
side of an application that is in linear position, or in the linear part of its 
right side. The last case is the real improvement and asks for arguments to be 
separated in linear and non linear arguments. Therefore, the right side of the 
applications will be replaced by a new kind of expression different from terms, 
the "bags" . Bags are multisets containing some linear (non banged) arguments 
and exactly one non linear (banged) argument: 

(terms) M, N : Xx.M \ M B \ M+N \ 
(bags) B,C: [Mi,...,M^;M'-]\ B + C \0 

This is the syntax of [4] modulo the macro M+N = (Xx.x) [{M+N}']. 
For convenience, the finite sums will be denoted S^Qi and the different O's are 
just the neutral elements of the different sums. This demonic sum had to be 
implemented since we want the calculus to be resource sensitive and conflu- 
ent, thus there is no other choice than to considere the sum of all the possible 
outcomes. Sums distribute with any linear context: 

Ax.(E,M,) = S,(A,.MO (E.MO (S.iVj) = E,.,(M, N,) 

( [(S,, ) , . . . , (£,„,,„ ) ; M- ] ) = h^ik, h [^l ,-,Ml;M'-] 

In the application, each linear argument will replace one and only one occurrence 
of the variable, thus the need of two kinds of substitutions, the usual one, 
denoted {.}, and the linear one, denoted (.). This last will act like a derivation 
M{N/x)^mNy. 
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x{N/x)=N x{N/y) = {Xy.M){N/x) = Xy.{M{N/x)) 

{[M^,...,Mr,;M'])(N/x) = (I]r=i[Mi, ..,M,(iV/x), ...M„; M^]) + [Mi, ...,M„,M(iV/:r);M!] 
(M P)(N/x) = {M(N/x) P) + (M P{N/x)) 



This enables us to describe the /3-reduction: 

(13) (\x.M)[N,,...,Nn;N'-] ^ M{m/x)-{Njx){N- /x} 

In other words (Ax.M)[7Vi, .., iV„; iV'] ^ ^(N^, Nn){N) 

2.2 r(9A-calculus 

In differential proof nets the O-ary tensor and the 0-ary par can be added freely 
in the sense that we still have a natural interpretation in MRel and Aioo- These 
operations can be translated in our calculus as an exception mechanism. With 
on one side a t{Q) that "raises" the exception (or test) Q by burning its ap- 
plicative context (whenever these applications do not have any linear compo- 
nent, otherwise it diverges). And with on the other side a f (M) that "catch" 
the exceptions in M by burning the abstraction context of M (whenever this 
abstraction is dummy). The main difference with a usual exception system is 
the divergence of the catch if no exception are raised. 

We introduce a new operators and a new kind of expression that will play the 
role of exception, the tests: 

(terms) M,iV:f(Q) 
(test) Q,R: e\Q\R\ t{M) \ Q+R \ 

New operator immediately imply new distribution rules for the sum and the 
linear substitution: 

r(EiMi) = EiT{Mi) f(E,gO = S,f (Q,) \\j^iQ^U) = ^^hQ^u) 

t{M){N/x) = t{M{N/x)) f{Q){Nlx) = f{Q{N/x)) 

iQ+R){N/x) = Q{N/x)+R{N/x) {Q\R){N/x) = Q{N/x)\R{N/x) 

Here is the corresponding operational semantics: 

(7) r[f(Q)] 

(r) r(Ax.M) 
in) (f(Q)) [M^] 

(t2) (f(Q)) [Mi,...,M„>i;M!] 

(e) e\e 

The intuition of f{Q) is an operator that take a test (a Boolean value), compute 
it and returns an infinite A-abstraction with no occurrence of the abstracted 
variables. The test r(M) is taking a term and returns a successful test if the 
term is converging in a context that consists of an infinite empty application. 



Q 

t{M{0/x}) 

HQ) 
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2.3 Observational order and full abstraction 

In order to ask for full abstraction, one has to specify a reduction strategy. A 
natural choice would be the head reduction, but this would make {Xx.x [0, 0]) a 
normal form while no applicative instantiation of x allow the convergence of this 
term. Therefore, the reduction strategy we are considering will not be head- 
reduction, but the outer-head-reduction. This reduction will reduce subterms 
in linear position after the subterms in head positions ([13]). The corresponding 
normal forms are terms and tests of the form: 

M + Xx.y [7Vi,i,...,iVi,fc,;L-] ••• [7V„,i, A^„,fe„;4] 
M + \x.f{Q) 

Q + (\\r{N,)) 

Where every N_ and Q must be in outer-head normal forms and can't be a sum 
(but the Li are of any kind) . 

Definition 1 M is observationally below N, if for all context C(|.[), we have 
C(\N\) which is outer-head- converging whenever C (\M\) is outer-head-converging. 
They are observationally equivalent if moreover N is observationally below M 

In the particular case of the rSVcalculus , we can easily restrict contexts to 
test-contexts, which is contexts whose output is a tests. This will be applied 
systematically for simplification. 

We will denote <^g and =rd the observational order and equivalence of the rotV 
calculus and <q and =g those of the 9A-calculus . 

Bucciarelli, Carraro, Ehrhard and Manzonetto were then able to prove a 
strong theorem relating the model to the calculus: 

Theorem 1 Aioa is fully abstract for the K-calculus with resources and tests: 
for all closed terms M, N with resources ans tests, 

iMj = fNj o M =ra N 

3 The counter-example 

In order to exhibit our counter-example we will use the following property: 

Fact 1 Let B a calculus and A a super- calculus. Let M a model that is fully 
abstract for A. A4 is fully abstract for B iff the operational equivalences of B 
and A are equal on their domain intersection. 

In our context it means that, in order to prove the non full abstraction for the 
flVcalculus , it is sufficient to find two terms of the fiVcalculus that cannot be 
separated by any context of the olVcalculus but that are separated by a context 
of the rolVcalculus . This makes the research and the proof quite easier when 
the terms of the olVcalculus involved are complex but not the context of the 
Ti9A-calculus . 
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We are firstly exhibiting a term A of the SVcalculus that is observationally above 
the identity in the SVcalculus ', but not in the roiVcalculus 's observational order: 
A = Q [Xuvw.w [I [v']] , (Xuvw.u [{v [w'])'])'] (1) 
where Q is the Turing fix point combinator: 

iXgu.u[{g [{g [«'])'])']) [{Xgu.u[i9 [(9 [«'])'])'])'] 
This term seems quite complex, but, modulo 7y-equi valence, A reduces exactly to 
any of the elements of the following sum, and thus can be think as an equivalent: 
S„>iB„ = I;„>iAm"w.w [/ [u[] [ul] ■■■ [u^]] (2) 
This is due to the following property: 

Lemma 1 If Ai = Ax'^^.A (a;i [2:2] ■•• [a^i+iD then Aq ^-j, A and for all i, 

A, -* A,+i + B,^i 
Proof. Simple reduction unfolding the 8 once. □ 

In absence of tests, this term has a comportment similar to eq in the sense that 
it will converges in any applicative context provided that these applications do 
not carry linear components. In particular it converges more often than the 
identity: 

Lemma 2 For all context C(\.\) of the dX-calculus , i!/C(|/[) converges then C(\A\) 
converges, i.e. I <d A 

Proof. Let C(|.D a context that converge on / 

With the context lemma ([S]), and since neither / nor A has free variables, we 
can assume that C(|.D = (|.D Pi ■■■ Pk, thus by lemma [T] we have A ^* U + 

^^'^ C(\A) ^* U' + Xw.w [I Pi ••■ Pk] = U' + Xw.w [C^M^] 

converges. □ 

But in presence of real tests, its comportment appeared to be different that eg 
in the sense that it diverges under a f . In particular it is not observationally 
above the identity in rolVcalculus : 

Lemma 3 In the rdX-calculus , t{A [eq]) diverges, while t(I [eg]) converges, 
i.e. / ^rd A 

Proof. For all i, T{Ai [sq]) diverges since, by co-induction: 

r{A. [eo]) - riiA.i + (Ai^^y.y [/ - [x[,J])) [co]) 

= r{A,i [eo])+ri{Xx'^'y.y [I [x[] ■■■ [^.i]]) N]) 
t{A,+i [co]) +T{Xx'y.y [eg [x[] ■■■ [xl^i]]) 
r(A,,i [eo])+r(0 [eo [O'] - [O']]) 

The non outer-head convergence comes with the co-induction hypothesis for the 
first term, and is trivial for the second. □ 

Hence, we have broken the conjecture concerning the equality between the ob- 
servational and denotational orders. Let's break the whole conjecture: 

Theorem 2 Aioo is not fully abstract for the X-calculus with resources 



6 



4 Further works 



First a diligent reader will remark that we have a critical use of the demonic 
sum which is very powerful in this calculus. And an even more diligent one will 
remark that an arbitrary choice have been made concerning this sum: we could 
differentiate terms and reduced of terms and remove sums from the original syn- 
tax (they just have to appear in reductions of terms). The choice we made here 
corresponds to the one of 4 and carries an understandable counter-example. 
But we claim that another equivalent counter-example arises for the case with 
limited sum. This counter-example is, however, a little more complicated and 
make it necessary to rework the material of [4] (even if everything works exactly 
the same way). 

Our counter-example can be translated to some related cases. In particular, 
to prove non full abstraction of Scott's Poo for the A-calculus with angelic and 
demonic sums (conjectured in [7 ). For this calculus the extension with tests 
exists and is fully abstract for 2?oo, this is a trivial modification of the tests 
of [3] (using general demonic and angelic sums). In this framework the term 
0{Xxy.x + y) plays exactly the role of A in our example with the same output. 

In the end, from a unique object that is DLL, we exhibit two natural con- 
structions, one in the semantical world, the other in the syntactical one, but 
they appeared do not respect full abstraction. One would say that they are not 
that natural and that more natural one may be found. But this would be to 
easy, from the state of art we don't known more natural construction. The mis- 
understanding comes with the concept of naturality, it seems that the syntactic 
idea of "convergence" does not really correspond to the equivalent in seman- 
tical word. One being a lowest fix point and the second a largest one. This 
difference appears when working with the demonic sum that allow to check the 
convergence in unbounded applicative context. 

Finally we presented tests as a general tool whose importance is above the 
role we gave them here. This result is interesting and important as it presents 
tests as useful tools to verify that full abstraction fails. But it remains a negative 
result that does not justify alone any real interest for them. Further works will 
then focus on presenting positive proofs of full abstractions that are using tests. 
Following this way we already submitted a revisited proof of full abstraction of 
the Scott's 2?oo for the usual A-calculus [3]. 
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A The model M 



A.l Categorical model 

The category Rel of sets and relations is known to be a model of linear logic 

as it is a Sccly category (wc arc giving the interpretation, but wc will let the 
comutative diagrams to the reader since their comutations are trivial or like): 

It is monoidal with tensor functor given hy A <gs B - A x B, f ® g = 
{((u, x), (w, w) e f,{x,y) e g} and with the arbitrary unit 1 = {*}. It 
is symetric monoidal close with {A ^ B) = A x B if we take the evaluation 
ev = {({(a,b),a),b)\a e ^,6 e B} e Rel((A -° B) ® A,B). So it is star autono- 
mus with 1 as dualising object (for a trvial duality). 

This give us the interpretation of multiplicatives: A®B = A^B = A ^ B = AxB 
The category is cartesian, with catesian product = {(i,x)\i e 7, a; e 

Si}, projections tt^ = {{{i,a),a)\a £ Ai} and product of morphisms Siifi ~ 
{{b, {i,a))\{b,a) € /j}. The terminal object is T = 0. 

This give us the interpretation of additives: Ai = S^i^i^i ~ {(^j'^)!* ^ I,o,€ 

A,} 

We can add a comonade {l,d,p) where the functor is define by \A = A4f{A), 
'/ = {([ai,-,afe],[6i,...,6fc)|Vi < k,(ai,bi) 6 /}, the deriliction by (Ia = 
{{[a],a)\a e A} and the digging by = {(mi+-"+mfe, [mi, ...,mfe])|mi, mfe e 
Mpia)}. 

This give us the interpretation of exponentials: !P =?P = ^f(P) 

This is a Seely category and a model of linear logic since the isomorphismes 
1 ^ [] is trivial and \A®\B ^\{A k B) is defined by ([ai, a;], 6^]) ^ 

[(l,ai),...,(l,a0,(2,6i),...,(2,6,)]. 

But it can even be seen as a categorical model of differential linear logic. By 
defining the co-dereliction natural transforamtion (Ia = {(a, [a])|a € A} € A ^ 
\A, we are fixing the contraction ca = {(l+r,(l,r))\l,r elA} the co-contraction 
CA = s'^Ij the weakening wa = {([],*)} and the co-weakening 

WA = {{*, [])}• So that we can define the derivative dx = {id\x®dx)°cx '-^-X 
\X®X and the co-derivative dx = cx°{id\x®dD) This derivatives 

are Taylor, i.e. if two morphisms /i, /2 '^-A B are such that /i o 9a = ./2 ° Qa 
then /i + (/2 ° wx ° wx) = (/i ° wx ° wx) + /2- Finally the exponential acept 
anti-derivatives, since it is bi-comutative and J a = IdA + QaQa = IdA is an 
isomorphism. For more detail about models of DLL see ??. 

As for every categorical model of linear logic, the exponential is a comonade 
and induced a coKleisly MRel = Rel\ whose objects are the set and whose 
morphisms from P to Q are the relations between !P and Q. The identities are 
the relations digp = {({a;}, a;)|a; € P} and the composition fog = {{X, z)\3{Y,z) e 
f,yy^Y,iX,y)eg}. 

A. 2 Algebraic model 

In order to have an algebraic model of clVcalculus we only need a reflexive 
object, i.e. a triplet {M,app,abs) where M is an object of MRel, app : (M 
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(!M^ ^ M) = {Mf{M) X M)) and aps : ((7W/(M) x M) ^ M) such that 
app o abs = Id. Such an object can a priory found by taking the fower fix 
point of M M M =?M M = M f(M) x M. But this will just leads to 
the trivial empty model. We will then resolve the more complicated fix point 
M I-*- (JM)^'^= N X A4f(M) where the exponent represent an infinit tensor 
product. The lower fix point will be called Moo- 

An other way to see the fixpoint is to say that M have to be equal to 
the set of quazi everywhere empty lists of finite substets of itself. Its element 
are the recursively defined as being either *, the list of empty elements, or 
ay-a with a e A4f{A4oo) and a e A4oo- The coresponding app and abs arise 
imediatly from the functoriality: app = {(a::a, {a,a))\{a,a) € A^oo} and abs = 
{({a,a),a::a)\a,a e Moo} 

In order to be understandable, we are presenting the interpretation of terms 
via a type system with types living in Moo- The usual presentation of the 
interpretation can be recoverd from the type system: 
(Mf = {{a,a)\x:dH M --a} 
IQf = {d\x:a^Q} 
The type system is the following: 

r I- A r H M : g r\- N:a T.x-.vt- M :a 

a;:[],ri-A x ■- [a] ^ x : a Tt-M+N-.a Tt-M+N-.a T h Xx-M 



T h M : w::a T' \- B : w /^j<n ^ Lj ■- Pj Ai>n Fj H L : /3i 



T\-Q ThM:* r\-Q T'^R 

rHf(Q):* T\-t[M] T + T'\-Q\R 



H e 
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